General Security Settings - GE T60 Instruction Manual

5.2 PRODUCT SETUP
Confirm RADIUS
Authentication
(Shared) Secret

General Security Settings

SETTING NAME
5
Session Lockout
Session Lockout
Period
Syslog Server IP
Address
Syslog Server Port
Number
Device
Authentication
Firmware Locked
Factory Service
Mode
Restore to Defaults Sets the device to factory defaults
Supervisor role
RADIUS user
names
Password
5-18
Confirmation of the shared secret. The
entry displays as asterisks.
DESCRIPTION
Number of failed authentications before the
device blocks subsequent authentication
attempts for the lockout period
The period in minutes that a user is prevented
from logging in after being locked out
The IP address of the target Syslog server to
which all security events are transmitted
The UDP port number of the target syslog server
to which all security events are transmitted
When enabled, local device authentication with
roles is allowed. When disabled, the UR only
authenticates to the AAA server (RADIUS).
NOTE: Administrator and Supervisor (if still
enabled) remain active even after device
authentication is disabled. The only permission
for local Administrator is to re-enable device
authentication when device authentication is
disabled. To re-enable device authentication, the
Supervisor unlocks the device for setting
changes, and then the Administrator can re-
enable device authentication.
Indicates if the device receives firmware
upgrades. If Yes and the firmware upgrade
attempt is made, the device denies the upgrade
and displays an error message that the lock is
set. On each firmware upgrade, this setting goes
back to the default.
When enabled (checkbox selected), the device
can go into factory service mode. To enable,
Supervisor authentication is necessary.
When enabled (checkbox selected), the
Supervisor role is active. To enable,
Administrator authentication is necessary. When
disabled, the Supervisor role is inactive. To
disable, Supervisor authentication is necessary.
Ensure that RADIUS user names are not the
same as local/device role names
Local/device roles except for Observer are
password-protected. All RADIUS users are
password-protected.
T60 Transformer Protection System
See the 245 characters
Password
Requirement
s section
MIN MAX DEFAULT UNITS MINIMUM
0 (lockout 99 3
disabled)
0 (no period) 9999 3
0.0.0.0 223.255. 0.0.0.0
255.254
1 65535 514
Disabled Enabled Enabled
No Yes Yes
Disabled Enabled Disabled
No Yes No
Disabled Enabled Enabled
See RADIUS See
server RADIUS
documents server
documents
See the See the Change
Password following Me1#
Requirement password
s section section for
requireme
nts
5 SETTINGS
N/A - Administrator
PERMISSION
- Administrator
min Administrator
- Administrator
- Administrator
- Administrator
- Administrator
- Supervisor
(Administrator
when Supervisor
is disabled)
- Administrator
- Administrator to
enable and
Supervisor to
disable
- Administrator
Text The specified role
and Administrator,
except for
Supervisor, where
it is only itself
GE Multilin